high7.8
CVE-2024-11598
Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authentica…
Impact
Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authenticated attacker to achieve local privilege escalation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ivanti | Application Control | through 2023.3 Versions 2023.3, 2024.1, 2024.3 |